Vulnerability Description
admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mole-Group | Gastro Portal \(Restaurant Directory\) Script | - |
Related Weaknesses (CWE)
References
- http://www.exploit-db.com/exploits/8775
- http://www.securityfocus.com/bid/35079
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50723
- http://www.exploit-db.com/exploits/8775
- http://www.securityfocus.com/bid/35079
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50723
FAQ
What is CVE-2009-4675?
CVE-2009-4675 is a vulnerability with a CVSS score of 7.5 (HIGH). admin/admin_info/index.php in the Mole Group Gastro Portal (Restaurant Directory) Script does not require administrative authentication, which allows remote attackers to change the admin password via ...
How severe is CVE-2009-4675?
CVE-2009-4675 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4675?
Check the references section above for vendor advisories and patch information. Affected products include: Mole-Group Gastro Portal \(Restaurant Directory\) Script.